Security
Your clients trust you with their secrets. We guard them as closely as you do.
Hukunci holds what a law practice can least afford to lose or leak: client files, matter strategy, salaries and complaints. Protection is built into how the system works, so it never depends on anyone remembering to switch it on.
Documents encrypted before they are stored
Each file is locked with its own key. What sits in storage cannot be read on its own.
Your firm’s own keys
Every firm’s data is locked with keys of its own, kept apart from the data itself.
Two-step sign in for all staff
No one on your team gets in with a password alone.
01
Encrypted before it is stored
Client documents, chat files, receipts, leave attachments and other files are encrypted before they are saved, each one with its own key. The stored copy is unreadable by itself. A file is only unlocked on the screen of someone your firm has allowed to see it.
- Every document and attachment has its own key
- Files stay encrypted wherever they are kept
- Unlocked only for people with access to them
- Download links stop working within minutes
02
Your firm’s own keys
Each firm’s information is locked with keys that belong to that firm alone. The keys are held in a dedicated key vault, separate from the database they protect, so a copy of the database on its own does not include them. Sensitive details inside the database are encrypted as well.
- Separate keys for every firm
- Keys kept apart from the data they protect
- Bank account numbers, salaries and payroll figures encrypted
- Those details stay encrypted in backups too
03
Your firm, and only your firm
Many firms use the platform, but each one only ever sees its own records. The separation is part of the foundation of the system rather than something each screen has to remember, and automated tests check it.
- Every firm’s records kept apart at the foundation
- No route from one firm’s data to another’s
- Separation checked by automated tests
04
Only the right people get in
Everyone on your team signs in with a password and a second step from an authenticator app or email code. Your clients can protect their portal accounts the same way. Accounts only work once their email address has been confirmed.
- Two-step sign in required for every member of staff
- Clients can turn on two-step sign in for their portal
- Email addresses confirmed before an account works
- Password reset links that work once and then expire
05
Access that matches each role
Your firm decides who can see and do what, module by module and action by action. A manager can be limited to their own team’s requests. When a new feature arrives, only your most senior administrator can use it until you choose to share it with others.
- Permissions set per module and per action
- Managers can be limited to their own team
- New features stay with your administrator until you share them
- Personal to-do lists stay private to their owner, even from administrators
06
A record of who did what
Every important change is recorded: what happened, who did it, when, and which matter it concerns. Approvals keep their own history, including the reason something was sent back. The record lives inside the product, where your partners can read it.
- A full history across matters, finance, staff and documents
- Approval history for expenses, invoices, time entries and leave
- Reasons recorded, so the history says why and not only what
- Readable by your team, not hidden in technical logs
Client visibility
Nothing reaches a client by accident.
Your clients only see what your firm has chosen to share. Matter updates for clients are written separately from internal notes, every document is private until someone shares it, and complaint conversations keep internal remarks apart from replies to the client. Everywhere, the starting point is private.
Questions from your partners or your IT adviser?
We are happy to walk through how your information is protected with whoever needs to sign off on it.